Privacy Policy

Last Updated: November 28, 2025

Introduction

Chaodi ("we," "our," or "us") operates the Chaodi mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

Information We Collect

Information You Provide Directly

We collect information that you provide directly to us when you:

Account Information: When you create an account, we collect your name, email address, username, and password. If you sign in using Google or Facebook, we collect information from those accounts as permitted by your privacy settings.
Profile Information: We collect profile information including your avatar, preferences, language settings, and any other information you choose to provide.
Payment Information: We collect payment and billing information, including bank account details for shop owners, payment methods, and transaction history. We do not store full credit card numbers; payment processing is handled by secure third-party payment processors.
Shop Information: If you operate a shop, we collect business information including shop name, address, bank account details, and product listings.
Communications: We collect messages, support tickets, and other communications you send through the Service, including communications with shop owners, customers, and our support team.
Content: We collect photos, product listings, reviews, ratings, and other content you upload or post to the Service.

Information Collected Automatically

When you use our Service, we automatically collect certain information:

Device Information: We collect information about your device, including device type, operating system, unique device identifiers, mobile network information, and device settings.
Usage Data: We collect information about how you use the Service, including pages viewed, features used, time spent, and actions taken.
Location Information: We may collect location information if you grant us permission, including your general location based on your IP address or more precise location if you enable location services.
Log Data: We collect log files that may include IP addresses, browser type, Internet Service Provider (ISP), referring/exit pages, date/time stamps, and clickstream data.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track activity on our Service and hold certain information.

Information from Third-Party Services

Google Sign-In: If you sign in using Google, we collect information from your Google account as permitted by your privacy settings, including your name, email address, and profile picture.
Facebook Sign-In: If you sign in using Facebook, we collect information from your Facebook account as permitted by your privacy settings, including your name, email address, and profile picture.

How We Use Your Information

We use the information we collect to:

Provide and Maintain the Service: Create and manage your account, process transactions, facilitate rentals, and provide customer support.
Process Transactions: Process payments, manage orders, handle refunds, and facilitate communication between customers and shop owners.
Communicate with You: Send you service-related notifications, updates, security alerts, and support messages. We may also send you marketing communications if you have opted in.
Improve the Service: Analyze usage patterns, conduct research, and develop new features and functionality.
Ensure Security: Detect, prevent, and address fraud, security breaches, and other potentially prohibited or illegal activities.
Comply with Legal Obligations: Meet legal requirements, respond to legal process, and protect our rights and the rights of our users.
Personalization: Customize your experience, provide personalized content, and make recommendations based on your preferences and usage.

We do not sell your personal information. We may share your information in the following circumstances:

With Other Users

Shop Owners: When you place an order, we share your contact information and order details with the shop owner to facilitate the rental transaction.
Customers: If you are a shop owner, we share your shop information and contact details with customers who place orders with you.
Public Profiles: Some information, such as your username and public profile information, may be visible to other users of the Service.

With Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

Payment Processors: To process payments and manage financial transactions.
Cloud Storage Providers: To store and manage data (including Firebase/Google Cloud).
Analytics Providers: To analyze usage and improve our Service (including Google Analytics, Firebase Analytics).
Customer Support: To provide customer support and respond to inquiries.
Marketing Services: To send marketing communications (if you have opted in).

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We may share your information for any other purpose with your explicit consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Secure authentication and authorization procedures
Regular security assessments and updates
Access controls and employee training

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will delete or anonymize it.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: You can access and review your personal information through your account settings.
Correction: You can update or correct your personal information at any time through your account settings.
Deletion: You can request deletion of your account and personal information by contacting us.
Data Portability: You can request a copy of your personal information in a structured, machine-readable format.
Opt-Out: You can opt out of marketing communications by following the unsubscribe instructions in our emails or by updating your preferences in your account settings.
Location Services: You can disable location services through your device settings.
Push Notifications: You can disable push notifications through your device settings or app preferences.

Children's Privacy

Our Service is not intended for children under the age of 13 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

Third-Party Services We Use

Firebase/Google Cloud: For authentication, database, storage, analytics, and crash reporting
Google Sign-In: For authentication services
Facebook Sign-In: For authentication services
Payment Processors: For processing payments

Permissions We Request

Our app may request the following permissions:

Photo Library Access: To allow you to upload product photos and share images in chat conversations.
Microphone Access: To allow you to record voice messages in chat conversations.
Location Services: To provide location-based features and improve service delivery.
Push Notifications: To send you important updates about your orders and account.

You can revoke these permissions at any time through your device settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@chaodi.co
Website: https://www.chaodi.co
Address: Executive Mansion, Sukhumvit 39, 10110 Bangkok, Thailand

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, disclose, and sell
The right to delete personal information we have collected from you
The right to opt-out of the sale of personal information (we do not sell personal information)
The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided above.

European Privacy Rights

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

The right to access your personal data
The right to rectification of inaccurate data
The right to erasure ("right to be forgotten")
The right to restrict processing
The right to data portability
The right to object to processing
The right to withdraw consent